Examples

name: AI Code Review
 
on:
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
 
jobs:
  ai-review:
    if: github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
      contents: read
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - run: git fetch origin ${{ github.base_ref }}
      - uses: actions/setup-node@v4
        with:
          node-version: "20"
      - run: npx -y @giolabsuy/ai-code-reviewer@latest review-pr
        env:
          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

name: AI Code Review
 
on:
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
    # Skip reviews on non-code changes to save runner minutes
    paths-ignore:
      - "**/*.md"
      - "**/*.lock"
      - "package-lock.json"
      - "docs/**"
  pull_request_review_comment:
    types: [created]
 
# Only run the latest push per PR; cancel superseded runs
concurrency:
  group: ai-review-${{ github.event.pull_request.number }}
  cancel-in-progress: true
 
jobs:
  ai-review:
    if: github.event_name == 'pull_request' && github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
      contents: read
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - run: git fetch origin ${{ github.base_ref }}
      - uses: actions/setup-node@v4
        with:
          node-version: "20"
      - run: npx -y @giolabsuy/ai-code-reviewer@latest review-pr
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
  handle-feedback:
    if: github.event_name == 'pull_request_review_comment'
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
      contents: read
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "20"
      - run: npx -y @giolabsuy/ai-code-reviewer@latest handle-feedback
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GITHUB_EVENT_PATH: ${{ github.event_path }}
          GITHUB_REPOSITORY: ${{ github.repository }}
          GITHUB_ACTOR: ${{ github.actor }}

# LLM provider
provider: anthropic
model: claude-opus-4-8
 
# Output language
language: en
 
# Tech stack (omit to auto-detect)
# tech: nextjs
 
# Custom rules file (Markdown, appended to system prompt)
rules: ./code-review-rules.md
 
# Files to exclude from review
ignore:
  - node_modules/**
  - dist/**
  - "*.lock"
  - "*.min.js"
  - "**/__snapshots__/**"
  - "**/*.generated.ts"
 
# Minimum severity to report
minSeverity: minor
 
# Maximum patch size per file (bytes)
maxFileSize: 150000
 
# Which check categories to run
checks:
  security: true
  performance: true
  maintainability: true
  testing: true
  documentation: false
  style: false
  bug-risk: true
  architecture: true
 
# Inline comment settings
inlineComments: true
summaryComment: true
maxInlineComments: 25
 
# Additional instructions appended verbatim to the system prompt
# These override everything else — use sparingly
customInstructions: |
  This project follows Clean Architecture (domain / application / infrastructure layers).
  Any import from infrastructure into domain is a critical finding.
  Treat missing OpenTelemetry spans on public service methods as a minor finding.
 
# @botai inline feedback commands (requires handle-feedback job above)
# Threads accept: @botai resolved | dismiss | explain, and @botai approved on a general comment
feedback:
  enabled: true
 
# Auto-approve when the model is confident and there are no blocking findings
autoApprove:
  enabled: true
  minScore: 8
 
# Adversarial self-critique: refutes weak findings and drops low-confidence,
# low-severity ones before posting (reduces false positives). On by default.
selfCritique:
  enabled: true
  confidenceThreshold: 0.6
 
# Project grounding: read CLAUDE.md + docs/ as authority above the generic rules
projectContext:
  claudeMd: true
  docsGlobs:
    - "CLAUDE.md"
    - "docs/**/architecture*.md"
    - "docs/**/adr/**/*.md"
    - "docs/**/*-rules*.md"
    - "docs/**/conventions*.md"
    - "docs/**/domain*.md"
  maxChars: 8000
 
# Official stack docs grounding (opt-in, fail-open). Requires CONTEXT7_API_KEY.
officialDocs:
  enabled: false
  provider: none   # set to 'context7' to enable